Security Basics mailing list archives

Re: Down with DHCP!!!!


From: rob.lucchetti () gmail com
Date: 20 Feb 2006 19:50:35 -0000

Well as much as that does make sense, i don'e see the security in creasing as uch as the administrative overhead 
increasing from having to deploy more hardware, and besides, all one would have to is figure out you ip scheme in order 
to create a valid address, or copy someone else's address for use on their own machine.
One way to stop unauthorized use on a network would be switch port secutirty. This involves the use of registering the 
machines mac address with a given port on a switch, commonly available in Cisco switches. This ensures that on that 
port, that NIC and only that NIC are allowed to communicate. 
The rest of ports can be shut down, and it's easily manageable. You can still keep your dhcp. Dhcp can be very usefull 
in carrying information to and end users pc about the network and it's servers, it would be a shame to take it away.
Hope this helped.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: